alcamo/uri
The package has a clear README, declared Apache-2.0 licensing, no install-time scripts, and a small runtime dependency set. Its repository lacks security scanning and a security policy, while recent work comes from one contributor.
72%
Total Score
50
100
86
75
Health Score Breakdown
All recent commits came from one contributor, creating a real continuity risk. The package's active release history partly compensates, but no second active contributor is shown.
One commit was recorded in the last three months, so activity is present but limited. The recent release cadence provides compensating evidence against treating this as abandonment.
Composer is used as the build tool, but no security scanning tool is configured. The missing scanner is a process gap rather than evidence of unsafe code.
The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for consumers.
Version 0.2.5 is not a prerelease, and no recent releases are prereleases. Remaining below 1.0 suggests some API maturity risk but is not enough to outweigh the active release history.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/psr7 Version ^2 | — | — |
alcamo/exception Version ^0.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.